verify_privset
err = verify_privset(cp + 1, privs, privname, B_TRUE, plp);
err = verify_privset(limitpriv, privs, privname, B_FALSE, plp);