check for permission at opendir

So we don't surprise the caller at readdir

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>