It would be nice if there was more specificity in the documentation on which KPM features modify the boot.img on the fly. I'm too afraid to install or embed KPM because if it modifies the boot img it would render my device unbootable as the bootloader is locked.