r3838: use "security.NTACL" instead of "security.NTAcl" for the xattr name for ACLs