lkdtm: use struct arrays instead of enums