we can skip the following kernel modules:
   - realtime-lsm-source
   - truecrypt

kvm could be updated to the future actual version later as an external module.

hope we can ship truecrypt (the app) with the changed licence.