mac_kenv_check_unset
error = mac_kenv_check_unset(td->td_ucred, name);
int mac_kenv_check_unset(struct ucred *cred, char *name);