Restrict system category to kernel events