Mailing the story:

The kernel puts limits on which functions can be used from a loadable module. But instead of an all-or-none approach, one plan would create access control lists of which modules are allowed to use which functions. The idea behind this restriction is to place limits on the reach of modules and to provide a relatively well-defined module API.