1. A computer-implemented method comprising: executing a secure kernel in a data processing system, wherein the secure kernel includes a plurality of sensitive portions, and wherein the executing includes loading a kernel extension, wherein the kernel extension is associated with a cryptographic key; selecting a subset of the plurality of sensitive portions based on the cryptographic key; deleting said subset; and transferring control to the kernel extension subsequent to said deleting.