global USE flag
modules-sign

Cryptographically sign installed kernel modules (requires CONFIG_MODULE_SIG=y in the kernel)