LSM: Revive CONFIG_DEFAULT_SECURITY_* for "make oldconfig"