libcli/security: remove duplicate aces in se_create_child_secdesc()