append -P, not follow symlinks to dirs.

Otherwise, getfacl may recursive travel thru dir, for example
with /var/run -> /run 'getfacl -p /var/run' will recursive travel
all over /run, but 'getfacl -p /var/run/' will get just /var/run.