Hide kernel pointers for unprivileged users via kptr_restrict