bpf_token_allow_cmd
bool bpf_token_allow_cmd(const struct bpf_token *token, enum bpf_cmd cmd);
if (!bpf_token_allow_cmd(token, BPF_MAP_CREATE) ||
if (!bpf_token_allow_cmd(token, BPF_PROG_LOAD) ||
if (!bpf_token_allow_cmd(token, BPF_BTF_LOAD)) {
if (!bpf_token_allow_cmd(token, BPF_BTF_GET_FD_BY_ID)) {