Bring in XDR support routines. Add missing vnode handlers, and
a bunch of fake secpolicy from maczfs.