insecure boot/kernel ?