What about the implementation that Tails use? https://tails.boum.org/contribute/design/kernel_hardening/