KVM: VMX: work around lacking VNMI support