network: i believe that these macros are compat_net
    specific and i want to have as little compat_net related
    policy as possible. I can't remote it all unfortunately

    i actually do not intend to support any network controls (compat_net, secmark, netlabel)
    at all since those are only really useful in MLS environments