@triskelion apparently kernel dropped the policy but also lots of kernel-adjacent stuff still seems to enforce it so uh, yeah guess not