AFAIS this code is also used in the server. Thus it should use openat. My idea is: Add a constructor that takes
a SFile (like XAttributes(const SFile& file)) and add acl_get functions to the SDir class. That acl_get function could also check for ENXIO and only use get_acl_file as a fallback (with fchdir).