s4-pvfs: fixed handling of SEC_FLAG_MAXIMUM_ALLOWED