make sure no one tries to change our kernel