Add segvguard to Shawn's kernel config