libcli/security: allow round-trip for conditional ACE octal integers