you can actually see that it's being loaded: % kextstat | grep Steal 99 0 0xffffff7f81afc000 0x5000 0x5000 com.apple.Dont_Steal_Mac_OS_X

you can actually see that it's being loaded: % kextstat | grep Steal 99 0 0xffffff7f81afc000 0x5000 0x5000 com.apple.Dont_Steal_Mac_OS_X (7.0.0) <74 7 4 3 1>