FL-345: restrict pax-utils in genkernel, mask latest version