Build a crappy ring-0 toy antivirus in eBPF with the IMA LSM (blog.prizrak.me)