drm: move content protection property to mode_config