kfence: limit currently covered allocations when pool nearly full