audit_ctlname_to_sysctlevent
ar->k_ar.ar_event = audit_ctlname_to_sysctlevent(
au_event_t audit_ctlname_to_sysctlevent(int name[], uint64_t valid_arg);