Add X86-specific CLIP OS recommendations for kernel self-protection