s3-lsa: Fix access_mask calculation for new handle in _lsa_CreateAccount().