au_to_secflags
au_uwrite(au_to_secflags(s, *old));
au_uwrite(au_to_secflags(s, new));
token_t *au_to_secflags(const char *, secflagset_t);