WITH_RETPOLINE="YES"
WITH_CLANG_EXTRAS="YES"
WITHOUT_SOURCELESS="YES"
WITH_BHYVE_SNAPSHOT="YES"
WITH_KERNEL_RETPOLINE="YES"
WITH_MALLOC_PRODUCTION="YES"
WITHOUT_LLVM_ASSERTIONS="YES"
WITH_REPRODUCIBLE_BUILD="YES"
WITH_DISK_IMAGE_TOOLS_BOOTSTRAP="YES"

#WITH_BEARSSL="YES"
#WITH_VERIEXEC="YES"
#WITH_LOADER_VERIEXEC="YES"
#WITH_LOADER_EFI_SECUREBOOT="YES"
#WITH_LOADER_VERIEXEC_VECTX="YES"
#WITH_LOADER_VERIEXEC_PASS_MANIFEST="YES"