cfengine_stdlib.cf: add getfacl to paths under "any"