KVM: Add SMAP support when setting CR4