kernel: fix unitialized value in nlookup_init_*

Forbid all but nlookup_init_at in capability mode