Security Hardened Mode

• Restrict syscall elevation to approved known safe / filtered sys calls
• Limit access to device endpoints to known safe / filtered endpoints