To use dazuko or realtime.lsm and such, one must build one's own kernel with the CONFIG_SECURITY_CAPABILITIES=m. Otherwize, the standard security module get built in and dazuko cannot run.