policy_update
int error = policy_update(AA_MAY_LOAD_POLICY, buf, size, pos, ns,
int error = policy_update(AA_MAY_LOAD_POLICY | AA_MAY_REPLACE_POLICY,