These safety policies help ensure that an accessor does not migrate
CPUs while accessing a percpu variable.  The "cli" safety policy only
allows percpu variables to be accessed when interrupts are disabled.
The "internal" safety policy leaves it up to the caller.  Not
surprisingly, most current percpu variables use internal.