strip kernel modules more aggressively: make all global symbols local, rename all...