libcli/security: improve conditional ACE composite comparison