->permission() sanitizing: don't pass flags to ->inode_permission()