mac_kenv_check_set
error = mac_kenv_check_set(td->td_ucred, name, value);
int mac_kenv_check_set(struct ucred *cred, char *name, char *value);