mac_prison_check_set
error = mac_prison_check_set(td->td_ucred, pr, opts, flags);
int mac_prison_check_set(struct ucred *cred, struct prison *pr,