Disabling X86_VSYSCALL_EMULATION turns vsyscall off completely, and LEGACY_VSYSCALL_NONE can be changed at boot time via the cmdline parameter. Thanks to @izh1979 for the idea