```You are advised to *never* enable this.``` -> ```You are advised to *never* enable this, but if you do, make sure to also set the sysctl kernel.grsecurity.grsec_lock to non-zero as soon as all sysctl options are set. *THIS IS EXTREMELY IMPORTANT*``` ... (or something to this effect).

Ideally, though, if you enable this sysctl option, NixOS would set the grsec_lock sysctl automatically, but we would have to make sure that grsec_lock only gets set after all the user sysctls have already been set. Perhaps we can add a new systemd service, just for setting grsec_lock, that automatically gets executed after the systemd-sysctl service?