[PULL 14/32] crypto: replace stat() with access() for credential checks