How difficult would it be to disable it by default and arrange for a kernel printf mentioning the sysctl when a process attempts to use it and fails (does a process exit at that point? If not the printf would need to be rate limited) -- David/absolute -- www.NetBSD.org: No hype required --