pub(crate) fn new_sepolicy_at(fd: impl AsFd) -> Result<Option<SePolicy>>
A thin wrapper for loading a SELinux policy that maps “policy nonexistent” to None.