secpolicy_pool
if (secpolicy_pool(CRED()) != 0)
ASSERT(secpolicy_pool(CRED()) == 0);
int secpolicy_pool(const cred_t *);