Build the state of the art kernel, but without apparmor and auditing support. In this way the syscalls e.g. are twice as fast as with these both kernel config options enabled.