Refactor: libcrmcommon: Limit scope of xpath in pcmk__check_acl()

This is really more for clarity, since the pcmk__if_tracing() macro is a
bit confusing to look at.

We'll reduce some duplication in an upcoming commit.

Signed-off-by: Reid Wahl <nrwahl@protonmail.com>