fs/posix_acl.c: make posix_acl_create() safer and cleaner