Per Theo de Raadt:

"At boot time, a unique kernel is built and installed for the next boot"