kernel: prevent -f*-sections from leaking into the boot zImage wrapper on arm