kfence: always use static branches to guard kfence_alloc()