Parsers, verifiers, whatever? User space downloads file. User space sets up probation dir. User space requests kernel to load once the new file. After that,

Parsers, verifiers, whatever? User space downloads file. User space sets up probation dir. User space requests kernel to load once the new file. After that, after a successful boot or 36 hours the file is marked as safe and set to autoload. Or, you know, just load it. It will be cheaper. The ROI on loading it immediately is far greater and that's what counts.