kadm5_create_policy
kadm5_create_policy(void *server_handle,
retval = kadm5_create_policy(handle, &policy, mask);
ret->code = kadm5_create_policy(handle, &arg->rec, arg->mask);
kadm5_ret_t kadm5_create_policy(void *server_handle,
check(kadm5_create_policy(handle, &ent, KADM5_POLICY));
check_fail(kadm5_create_policy(handle, ent, mask | KADM5_POLICY), code);
check_fail(kadm5_create_policy(handle, &ent, 0), KADM5_BAD_MASK);