We are thinking of that could be interesting to add three parameters to kernel:
Denied attributes Denied tags Denied protocols
with greather priority than the allowed.
There are many tags to allow. Only a few to denied.
Regards, Agustín