How do you manage kernel updates when running a custom kernel? Do you have to regularly check for security patches that you need to apply? It seems like something you could easily forget about without the benefit of an auto-update checker reminding you.