[Samba] Krb5 Security cifs.mount with cifsacl Permission Denied

[Household Cang]

Hello,

I am mounting Windows share with sec=krb5

sudo KRB5CCNAME=/tmp/krb5cc_10001 mount -t cifs //nas.domain /mnt/drive -o sec=krb5,cruid=10001,cifsacl

Got
VFS: cifs_acl_to_fattr: error -13 getting sec desc
VFS: cifs_read_super: get root inode failed

If excluding cifsacl, these two messages go away. On Windows client, I could browse the Security tab in properties fine, what is the issue?

Many thanks.