AA_USERNS_CREATE
AA_USERNS_CREATE));
if (ad->request & AA_USERNS_CREATE)
if (ad->denied & AA_USERNS_CREATE)