don't mask out SEC_FILE_READ_ATTRIBUTE on SMB2