kauth_authorize_device_spec
error = kauth_authorize_device_spec(ap->a_cred, req, vp);
int kauth_authorize_device_spec(kauth_cred_t, enum kauth_device_req,