vfs: move ACL cache lookup into generic code