- no need to always_update blacklist or sysctl.conf