thinkpad-acpi: restrict access to some firmware LEDs