secpolicy_swapctl
int secpolicy_swapctl(const cred_t *);
if ((error = secpolicy_swapctl(CRED())) != 0)