[yjftsjthsd-h]

If we're going that route, I'd like a bootloader-supplied kernel option that defaults to enabled (ideally with the GRUB/whatever menu having am option to disable it.

[pmarreck]

That's fair. I just wanted it to default to safe (as good user design dictates).