mac_kenv_check_get
error = mac_kenv_check_get(td->td_ucred, name);
int mac_kenv_check_get(struct ucred *cred, char *name);