kbuild: change filechk to surround the given command with { }