Disable feature CONFIG_SEC_RESTRICT_* instead of SELinux