secpolicy_ip
(secpolicy_ip((c), (x)->opdes_access_req_priv, B_FALSE) == 0)
(secpolicy_ip((c), (x)->opdes_access_req_priv, B_TRUE) == 0)
int secpolicy_ip(const cred_t *, int, boolean_t);