libcli/security: add a function that checks for MS NFS ACEs