firmware blob shipped in grsec patch, why?