smack: fix key permission verification