libguestfs and hardened-gentoo