mac_prison_check_get
error = mac_prison_check_get(td->td_ucred, pr,
error = mac_prison_check_get(td->td_ucred, pr, opts, flags);
int mac_prison_check_get(struct ucred *cred, struct prison *pr,