kbuild: check for leaked CONFIG_ symbols to userspace