restrict_link_by_ca
extern int restrict_link_by_ca(struct key *dest_keyring,
restriction->check = restrict_link_by_ca;