[FR]: Add options to control `Enforce Denylist`

[R917C]

Description

Control the "Enforce Denylist".

Reason

Adding this feature can do some things. It may be possible to make some modules work, but I don't know.

P.S.: The proprietary software ZygiskNext already implements this feature.

Confirmations

• This feature is not already implemented.
• I have verified that this is not a duplicate feature request.

Code of Conduct

• I agree to follow this project's Code of Conduct

[sewnie]

This is required for me to make a certain banking app work on ZygiskNext, while ReZygisk fails with PIF, making the app fail regardless.

[Guido83]

+1
I have also issues with banking apps detecting root while zygisk next works with them

[hayvan96]

This would be very precious -- on my wife's pixel 4a (rooted with apatch, kernel 4.14), rezygisk (even CI) would prevent using a finnish banking app. Zygisk next is OK. Note that on my pixel 6a (kernelsu-next, kernel 6.1), rezygisk is perfectly ok with the same app. Anyway, a fine granularity would allow to use FOSS-only modules on my wife's device as well :)