We need an easy way to ensure that only kernel modules in an whitelist can load. I’m tired of blacklisting modules I never need.