ESXi 5 - How to disable unsigned kernel modules

Hi. The 5.0 Hardening Guide "briefly" mentions "disabling unsigned modules and removing the offending VIBs from the host".

What's the best way to do both, i.e.: same/separate CLI commands?

Just looking for a general form of the command for doing both of the above.

Thanks.