use talloc_tos() in share_access_check()