PRIV_VERIEXEC_DIRECT
case PRIV_VERIEXEC_DIRECT:
mac_priv_grant(td->td_ucred, PRIV_VERIEXEC_DIRECT) != 0) {