priv_reset_PA
extern void priv_reset_PA(cred_t *, boolean_t);
priv_reset_PA(newcr, B_TRUE);
priv_reset_PA(newcr, B_FALSE);
priv_reset_PA(newcr, ruid != -1 && euid != -1 && ruid == euid);