support older versions of libacl that do not have acl_extended_file_nofollow()