smack_have_access does not check label lengths properly when only 'access' is available