net/sfc: allow ports without MAE privilege