secpolicy_contract_observer
if (error = secpolicy_contract_observer(cr, ct))
int secpolicy_contract_observer(const cred_t *, struct contract *);