Makefile: make it possible to disable run of depmod

Let users optionally disable run of depmod with:

  make minstall DEPMOD=/bin/true
Add support for PAX's constify feature

PAX has a feature called constify which will writeprotect structs
that are marked as const.

We need tell PAX that it is ok to write in the ctl_table.