s4-dsacl: Fixed incorrect handling of privileges in sec_access_check_ds