fscrypt_policy_to_key_spec
int fscrypt_policy_to_key_spec(const union fscrypt_policy *policy,
err = fscrypt_policy_to_key_spec(&ci->ci_policy, &mk_spec);