> Maybe by not loading the module into unknown kernels in the first place? Then you better tell your customers not to `dnf update` until you've had a chance to

> Maybe by not loading the module into unknown kernels in the first place? Then you better tell your customers not to `dnf update` until you've had a chance to whitelist the new kernel and ship it in your own stream. Otherwise everyone who updates before you do ends up broken. If a vendor told me that, I would laugh, realize they were serious, thank them for their time but let them know that we will be going a different direction.