s3-vfs: Use the system. namespace for fake ACLs