libcli/security: cmocka test for running conditional ACEs