mm: add kvfree_sensitive() for freeing sensitive data objects