secflags_difference
secflags_difference(&ret->psd_assign, &ret->psd_rem);
extern void secflags_difference(secflagset_t *, const secflagset_t *);
secflags_difference(set, &delta->psd_rem);