start thinking about whitelisted kernels