kexec: move locking into do_kexec_load