file-has-acl: use acl_extended_file_nofollow if available