Here's something interesting I found in the man page for openat (2): it appears that it would retrun EACCES for file permission errors. EPERM is something different, with two possible causes.