acl_read: Rework Samba code to reflect Windows logic