I am hopeful copy.fail will open discussion about a "firewall" like policy related to (especially) new functionality in the linux kernel