suid removal and harden kernel params