libcli/security: implement object_in_list()