Brad why not play nice and have someone act as an in-between for grsec to lkml? Either that or slowly have the same implementations in grsec / pax extracted and polished to get included, sure there's bureaucracy (yama symlink restricts back and forth and then being merged into vfs). Or if you do it from a business prospective I understand that as well.