mac_check_call_reference initial commit

This plugin can be used to detect rootkits that modify call references
within kernel functions on Mac systems. The plugin scans all of the
function in the kernel symbols table to detect any calls that are made
to addresses not within the kernel.