I'm in the exact same boat. I've been playing with a domain checker for a restricted set of C for a kernel project, specifically for this reason.

But as of now I'm having to add better support for plugins in clang.