PR_ALLOW_SUSER
{"allow.suser", "allow.nosuser", PR_ALLOW_SUSER},
PR_ALLOW_SUSER)
return (prison_allow(cred, PR_ALLOW_SUSER));
prison_set_allow(cred, PR_ALLOW_SUSER, enabled);