Enable heap randomization
Disable KALLSYMS_ALL
Disable DEVMEM
Disable DEVKMEM