[opensuse-security] why no kernel randomization