mac_priv_grant
if (mac_priv_grant(cred, priv) == 0) {
mac_priv_grant(cred, priv) != 0)
if (mac_priv_grant(cred, PRIV_VERIEXEC_NOVERIFY) == 0)
mac_priv_grant(td->td_ucred, PRIV_VERIEXEC_DIRECT) != 0) {
mac_priv_grant(td->td_ucred, PRIV_VERIEXEC_NOVERIFY) == 0) {