mac_cred_check_setcred
error = mac_cred_check_setcred(flags, old_cred, new_cred);
int mac_cred_check_setcred(u_int flags, const struct ucred *old_cred,