[PATCH 1/2] server: Grant the same access rights when req->access is zero in duplicate_token.