[PATCH] x86: tighten kernel image page access rights