CHG: set selinux=0 in kernel options. Closes feedback #62 (system/selinux)
REM: virtual memory/address space limit. Better memory restriction exists in cgroup memory controller. Imposing any such limit creates undesirable side-effect in V8 allocation, see nodejs/node #25933 (system/limits)
REM: opcache.huge_code_pages. Introduces marginal startup tax on multitenant environments, see php/php-src PR #10301 (apnscp/php-filesystem-template, php/create-configuration)