sadb_match_query
!sadb_match_query(&ps->sq, entry)) {
boolean_t sadb_match_query(ipsa_query_t *q, ipsa_t *sa);