changeconfig daemons (puppet, cfengine, etc) with grsec?