1)minor fix and cleanup dev_rd_only kernel patch on HEAD
2)add sec support on kernel config
3)some cleanup