The catch is that most things I might want to secure these days run in containers... where such system-wide configuration is irrelevant. And conversely,...