> Someone suggested trying to reduce the overhead even more. So, attached
> diff produces these numbers:

i think it's better to remove "#ifdef NVERIEXEC" by replacing them
with kauth or something like that and unlisten the scope when inactive,
rather than inventing this kind of optimizations.

YAMAMOTO Takashi