aa_policy_admin_capable
bool aa_policy_admin_capable(const struct cred *subj_cred,
if (!aa_policy_admin_capable(subj_cred, label, ns))
res = aa_policy_admin_capable(current_cred(), label, ns);