I'm still not sure. I was able shut my test system down, where the SFS server exists, re-ipl without RACF in the CP LOAD module.
I could not do the same to the secondary node. This did not change anything. I am still only able to see files and directories which are granted access to public.