pub fn keyctl_restrict_keyring( keyring: KeyringSerial, restriction: Restriction<'_>, ) -> Result<(), Errno>