keyfunc.sh.in (prepare): Exit nonzero if ACL check fails.