{ boot.kernelParams = [ "mitigations=off" ]; }