One alternate method is to have a startup script that loads your custom kernel module, then uses sysctl -w "kernel.modules_disabled=1" which can not be un

One alternate method is to have a startup script that loads your custom kernel module, then uses sysctl -w "kernel.modules_disabled=1" which can not be unset without a reboot.