Proactively shrink a Linux host's kernel-module attack surface by blacklisting every module not currently in use. - jnuyens/modulejail