name=valid_template

[sysctl]
kernel.kptr_restrict=1

[grub]
nosmep=
