KVM: Add SMEP support when setting CR4