ipsec_sp_reject
result = ipsec_sp_reject(sp, m);
static int ipsec_sp_reject(const struct secpolicy *, const struct mbuf *);