Say why DoT stays opportunistic, now that it is measured rather than feared
Take the secureblue review's adopted set, nine files and a SUID strip