Secmodel cleanup

[Elad Efrat <elad%NetBSD.org@localhost>]

Hi,

I'd like to cleanup the secmodel code a bit. Specifically:

  1. Separate the suser code from the bsd44 secmodel directory to its
own secmodel directory
  2. Turn our secmodels into modules
  3. Add a new "secmodel" module class, that will take care of the
"nsecmodel" count, thus allowing us to get rid of
secmodel_{,de}register()
  4. Separate non-suser (i.e., subsystem specific user-id/group-id
matching etc.) decisions from the suser secmodel code back into the
appropriate subsystem(s) as kauth(9) listeners (this is similar to
what Iain had done in the bluetooth code)

Are there any objections to such changes?

Thanks,

-e.