Split get_nt_acl() into two functions: fsp- and non-fsp variant.