Both kernelcare and ksplice devs previously stated that they only implement bugfixes and security fixes, but not new features. So it is "normal" for it to not work on older kernels.
So far only 1 node I've tested has been correct. The rest have been off by as many as 7 containers (VPS shows 7 containers less than actually on the node).