Kernel Address Isolation to have Side-channel Effectively Removed