m7: enable RESTRICT_ROOTFS_SLAVE