kernel recompilation for better hardening

A post was split to a new topic: Should the BPF JIT compiler be disabled?