keys: add keyctl function to get a security label