KernelCare installed (licensed) - Security Advisor warns no symlink protection

Security Advisor Kernel does not support the prevention of symlink ownership attacks. Can someone please explain to me why I am getting warnings in Security Advisor about no symlink protection? [root@server ~]# kcarectl --check The latest patch is applied. [root@server ~]# kcarectl --set-patch-type extra --update 'extra' patch type selected Downloading updates Patch level 4 applied. Effective kernel version 3.10.0-957.1.3.el7 Updates already downloaded Kernel is safe
The warning in Security advisor dissapears once I set the extra patch type. This has been done before, and seem to be "unset" at some point. How is that possible? Does cPanel updates etc. disable KernelCare extra patch set?