makes no sense without linux-hardened