smack: fix: allow either entry be missing on access/access2 check (v2)