mac_check_shadow_trustedbsd initial commit

This plugin can be used to detect rootkits that modify references to
the TrustedBSD policy list within functions. The modified reference
would point to a malicious TrustedBSD policy list while the symbols
table would still point to the clean policy list (shadowing).