linux: add 'hardened' kernel with grsec/PaX+apparmor enabled
vim: add config option to generate vimrc
grsecurity: version bump
Add --repair option to nixops
recursive-pth-loader: build sitecustomize.pyc

If this file is not created at build time, then python (when run as root) will
create it at run time and mess up the consistency of the nix store.