current distro situation is a bit sucky, as most feature customization (regex support, proper algo for huge dictionaries) is done at compile time.
build scripts usually omit any of this customization, resulting in bins doing simplest possible checking.
rework structure to allow including multiple filtering engines and maybe multiple crypto engines.
should probably be default option.
ability to compile without everything should remain though to allow produce optimized small bins.
icache impact should be minimal as hot loop happens at single location anyway (though im cargo culing a lot here).