restrict_link_by_key_or_keyring_chain
link_fn = restrict_link_by_key_or_keyring_chain;
extern int restrict_link_by_key_or_keyring_chain(struct key *trust_keyring,