pfkeyv2_policy
rval = pfkeyv2_policy(ipa, headers, &freeme, &freeme_sz);
int pfkeyv2_policy(struct ipsec_acquire *, void **, void **, int *);