Disable kernel module autoloading

kernel.modprobe = ""

Many kernels are configured to load features as loadable modules, which allows for a small kernel image with a rich feature set. Modules are loaded on request, but even unprivileged users can trigger the loading of modules. This increases the attack surface and can trigger bugs in less commonly used code. That’s why we recommend: On systems with security constraints, kernel modules should only be loaded explicitly.