afb-auth: improve afb_auth_check_permission