dsdb-acl: make use of acl_check_access_on_attribute() in acl_modify()