aa_prepare_ns
struct aa_ns *aa_prepare_ns(struct aa_ns *root, const char *name);
ns = aa_prepare_ns(policy_ns ? policy_ns : labels_ns(label),