Merge "Enforce restrictions on kernel module origin" into nyc-dev