prison_priv_check
return (prison_priv_check(cred, cap));
error = prison_priv_check(cred, priv);
int prison_priv_check(struct ucred *cred, int priv);