The kernel symbol resolver requires access to sysprofd, which might not be available in some contexts (such as when no polkit agent is available). This allows that to continue working by disabling the kernel with the user-only setting.
