Grsecurity best practices