GRSEC + KVM without modules