What keeps kernel shadow stack effective against kernel exploits?