grsecurity: add GRKERNSEC_DENYUSB option (disabled by default)

This option tells the kernel to ignore plug-in events of USB devices. Useful to protect against attacks with malicious hardware. Currently disabled by default, though.