zfs_secpolicy_hold
error = zfs_secpolicy_hold(zc, innvl, cr);
zfs_ioc_hold, zfs_secpolicy_hold, POOL_NAME,