ZFS ACL overflow fix

Passing a pointer to uid_t (a 32 bit type) to zfs_acl_next_ace, which
writes to it assuming it is a uint64_t pointer has the chance to
overwrite unrelated stack memory, such as access_mask.