It should be possible to require that a module load (e.g. refuse to start SSL). Similarly, it should be possible to prevent module that would otherwise be loadable from being loaded (buggy SSL library, don't want to use). Similarly, it should be possible to identify which modules are available on the system.