key_allocsa_policy
sav = key_allocsa_policy(sp, saidx, error);
struct secasvar *key_allocsa_policy(struct secpolicy *,