Stop explicitly enabling kaslr: it's enabled by default in Debian, and this kernel parameter is not supported anymore.