[PATCH secure-modules 06/13] Restrict /dev/mem and /dev/kmem when module loading is restricted