Upstream issue: https://github.com/zfsonlinux/zfs/issues/2921 The ebuild should make sure CONFIG_GRKERNSEC_HIDESYM and CONFIG_GRKERNSEC_RANDSTRUCT are disabled and notify the user otherwise.
We removed sys-kernel/spl some time ago.