fetch_acl
return fetch_acl (context, NULL, &context->acl_flags);
ret = fetch_acl (context, princ, &princ_flags);