secpolicy_audit_modify
if (secpolicy_audit_modify(CRED()) != 0)
int secpolicy_audit_modify(const cred_t *);