make RestrictSys entries configurable

Signed-off-by: Cristian Staretu <cristian.staretu@gmail.com>