You need a different kernel for firmware verification. But it should be regulated at this point.