@josh not really. i've added like, literally hundreds of things to sysctl config and also kernel cmdline

mostly works but i know how not to fail. i do lockdown/mitigations on my machine