hkapt

• https://forums.whonix.org/t/kernel-recompilation-for-better-hardening/7598/292
• http://forums.whonix.org/t/kernel-recompilation-for-better-hardening/7598/293
• https://forums.whonix.org/t/kernel-recompilation-for-better-hardening/7598/340

Before shipping this it also needs a fallback plan how to "upgrade" users to non-hardened kernel in case maintenance cannot be kept up at some point.