veriexec_check_path_label
int veriexec_check_path_label(const char *, const char *);
error = veriexec_check_path_label(argv[optind], want);