Im suspicious that turning it off entirely would also provide equivalent protection as kernel and user space mode. If not more more.