s3/posix_acls: replace dup_sec_desc() usage