kernel: make /proc/kallsyms mode 400 to reduce ease of attacking