ACPI: make some IO ports off-limits to AML