[PATCH 1/2] key: Use keyring restriction keyctl