consult lsm when receiving memfds