ima: rework CONFIG_IMA dependency block