key_getspacq() returns holding the spacq_lock. Unlock it in all cases.

MFC after:	1 week
Sponsored by:	Yandex LLC
Merge remote-tracking branch 'freebsd/master' into hardened/current/master
Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/segvguard