# Restricts dmesg { ... }: { config.dendritic.features.security-sysctl-debug = { nixosModules = [ ( { ... }: { boot.kernel.sysctl = { "kernel.kptr_restrict" = 2; "kernel.dmesg_restrict" = 1; }; } ) ]; }; }