disable CONFIG_GRKERSEC_PROC

The protection for /proc cannot be toggled dynamically and breaks too
much out-of-the-box. There's a hidepid=2 mount option for /proc upstream
with the same functionality as CONFIG_GRKERNSEC_PROC_USER=y, so the lost
functionality is the option of a trusted group.