ioctl_compat: hide code from user, enable conditionally