jeremy observed that access() on unveiled space was returning errors

jeremy observed that access() on unveiled space was returning errors
for valid requests.  This is because the nd.ni_unveil to namei() was
always UNVEIL_READ, regardless of the request amode.  Building a
correct ni_unveil passes a new regression test, producing expected
results.
ok beck jeremy