verify kernel version sanity, also on run