key_sp2msg
*mp = key_sp2msg(policy, M_NOWAIT);
m = key_sp2msg(sp, M_WAITOK);
struct mbuf *key_sp2msg(const struct secpolicy *, int);