And return explicit nfserr values that match what is documented in the
new comment / API contract.
Signed-off-by: NChuck Lever <chuck.lever@oracle.com>