Hi,

veriexec generates messages of 2 types: about mismatched fingerprints and 
about lacking fingerprint.  All of them go to syslog with high importance 
level.  Only messages about mismatched fingerprints are really always 
important.  Messages about lacking fingerprint may be not so interesting 
but they also go as "kern.crit".  Those messages can junk up logs.  Maybe 
NetBSD need to have some sysctl variable to change their syslog level?  
Or separate syslog facility.

Also note that MAKEDEV currently does not create /dev/veriexec.