KADM5_POLICY_ATTRIBUTES
KADM5_PW_LOCKOUT_DURATION | KADM5_POLICY_ATTRIBUTES | \
if (!(mask & KADM5_POLICY_ATTRIBUTES))
if ((mask & KADM5_POLICY_ATTRIBUTES))