security: allow Kconfig to set default mmap_min_addr protection