Sure, “restrict” the kernel access. And the first company to be granted the requisites for kernel access, CrowdStrike.