GCC stackleak function attribute

That certainly sounds sensible. Following up on roc's comment above, might the working environment be more friendly as well? Perhaps other people working on security in the kernel should be looking at whether some of their work can be done in the toolchain instead.