[PATCH 4.9 1/2] arm64/kvm: consistently handle host HCR_EL2 flags