nfsd4: reject negative acl lengths