4 ms·

Kernel module/driver sandboxing, if it cannot be feature complete (I believe it can), should be optional, opt-out, and strongly recommended.