s3: Factor out smbd_calculate_maximum_allowed_access