Add CONFIG_LOCK_DOWN_KERNEL