mask kernels for now
allow php opcache