security_cred_alloc_blank
int security_cred_alloc_blank(struct cred *cred, gfp_t gfp);
if (security_cred_alloc_blank(new, GFP_KERNEL_ACCOUNT) < 0)