libcli/security: conditional aces: don't allow U+0000 in unicode