safe(4): add gone_in 16.0

Reviewed by:	emaste
Differential Revision:	https://reviews.freebsd.org/D53426
(cherry picked from commit 9b7d2cee03e5d0b0723718047d4bc388d0745591)

share/man/man4/safe.4

@@ -25,7 +25,7 @@
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
-.Dd November 22, 2024
+.Dd October 31, 2025
 .Dt SAFE 4
 .Os
 .Sh NAME
@@ -57,6 +57,11 @@ In
 .Cd hw.safe.rngbufsize
 .Cd hw.safe.rngmaxalarm
 .Ed
+.Sh DEPRECATION NOTICE
+The
+.Nm
+driver is deprecated and is scheduled for removal in
+.Fx 16.0 .
 .Sh DESCRIPTION
 The
 .Nm
@@ -128,5 +133,14 @@ packet processing.
 .Xr random 4 ,
 .Xr crypto 7 ,
 .Xr crypto 9
+.Sh HISTORY
+The
+.Nm
+driver first appeared in
+.Fx 5.2 .
+It is deprecated in
+.Fx 15.0
+and removed in
+.Fx 16.0 .
 .Sh BUGS
 Public key support is not implemented.

sys/dev/safe/safe.c

@@ -424,6 +424,8 @@ safe_attach(device_t dev)
 #ifdef SAFE_DEBUG
 	safec = sc;			/* for use by hw.safe.dump */
 #endif
+	gone_in(16, "%s(4) is deprecated in 15.0 and removed in 16.0\n",
+	    safe_driver.name);
 	return (0);
 bad4:
 	crypto_unregister_all(sc->sc_cid);