[RFC 4/7] s390/vfio-ap: let 'on_scan_complete' callback filter matrix and update guest's APCB