Merge "init: set SetKptrRestrict before early-init"