This is great, but most often you need to configure these masks at runtime. Is there a way to expose this feature via an ioctl?