aa_label_match
int aa_label_match(struct aa_profile *profile, struct aa_ruleset *rules,
aa_label_match(profile, rules, peer, state, false, request, &perms);
aa_label_match(profile, rules, label, state, false, request, perms);
aa_label_match(profile, rules, new, state,