Set kernel env and load module. Verify the loader tunable is correctly set.
Escape to loader prompt:
```
load /boot/kernel/kernel
load /root/mac_veriexec.ko
set security.mac.veriexec.block_unlink=1
boot
```
```
# sysctl -T security.mac.veriexec.block_unlink
security.mac.veriexec.block_unlink: 1
```