PR_ALLOW_CHFLAGS
{"allow.chflags", "allow.nochflags", PR_ALLOW_CHFLAGS},
if (cred->cr_prison->pr_allow & PR_ALLOW_CHFLAGS)
NULL, PR_ALLOW_CHFLAGS, sysctl_jail_default_allow, "I",