Linux 5.8 will have support for `keyctl(KEYCTL_WATCH_KEY)`. Bindings and tests would be good to have (likely need Rawhide to get testing going for now).