fixes PRs [misc/10958] and [misc/10959] by Mike Santos <mike@ethmoid.org>
the latter depends upon aftermountlkm (but is required by DAEMON), so that lkms may be loaded before the securelevel is raised. noted by Rafal Boni <rafal@mediaone.net> in [bin/10780]