Similarly, I used to run grsec on RedHat once upon a time. But the whole thing just got too hard. When a critical update came, I could get a stock kernel running "yum update", or I could play around building a whole new grsec kernel.

I wish there was a way to take personalities out of this and let mainline merge the useful parts of grsec.