key_newsp
if ((sp[i] = key_newsp()) == NULL)
V_def_policy = key_newsp();
dst = key_newsp();
if ((newsp = key_newsp()) == NULL) {
struct secpolicy *key_newsp(void);