Pretty much the same as loading an unsigned or untrusted kernel module, someone would have to get it loaded from a privileged account.