Merge "init: set SetKptrRestrict before early-init" am: 88bba95989
am: 2a5d0c80ad

Change-Id: Ia76fe20ce0ff349d4da12d261e5adcbdb3b4c497