SIDPOL_CONSTRAINED
setid_policy_lookup((kid_t){.uid = old->uid}, new_id, new_type) != SIDPOL_CONSTRAINED;
result = SIDPOL_CONSTRAINED;
result = SIDPOL_CONSTRAINED;
result = SIDPOL_CONSTRAINED;
result = SIDPOL_CONSTRAINED;