default rc.local: do not secure symlinks
add new kernel option which is required to run shell scripts