sounds kinda complicated, what would it bring over secure boot and whitelisted kernels that tapoxi suggested?