[opensuse-security] SUSE kernel security features vs vanilla