ceph: avoid creating orphan object when checking pool permission