Have memlockd cache the running kernel and initrd.

Since we don't ship those in /boot anymore, the symlinks in / are broken.
Moreover, once we ship several pairs of kernel/initrd, the running pair
must be cached (and is already used by our kexec configuration).