I saw that new version landed in unstable. Is it possible to have it in stable-backports? I think it will be best to have it in stable-backports ONLY (without unstable) where it can live until 4.9 kernel gets EOL. In case of unstable the gap between vanilla kernel and 4.9 will get bigger and bigger and userspace tools may want to use new features unavailable in 4.9 LTS thus grsec value is lower there. Of course if it's not possible let it be as it is. Thanks for your efforts.
BTW: Here's some tools for building grsec kernel reproducible in case it's useful to you. https://github.com/hardenedlinux/grsecurity-reproducible-build
