[intel/portage] add /lib/modules to CONFIG_PROTECT_MASK