Mention the two recent big changes: pre-boot access control lists
and hardware DMA protection via the IOMMU.