s4: libcli/security: a NULL DACL allows access