In fact, I have a better solution. What about adding a .enabled={0;1} sysctl to each compat module? This way the Linux/FreeBSD modules are available by default, but not enabled.