Practical guide on out of tree mitigations on Linux