make it veristat-able and bpftool loadable

The following now works:

bpftool prog loadall userns-restrict.bpf.bpf.o /sys/fs/bpf/

veristat userns-restrict.bpf.bpf.o

Signed-off-by: Alexei Starovoitov <ast@kernel.org>