aa_pivotroot
int aa_pivotroot(const struct cred *subj_cred,
error = aa_pivotroot(current_cred(), label, old_path, new_path);