KVM: MMU: Set nx bit correctly on shadow ptes