key_acquire
*error = key_acquire(saidx, sp);
error = key_acquire(&saidx, NULL);
static int key_acquire(const struct secasindex *, struct secpolicy *);