x86: Add NX protection for kernel data