[PATCH 4.9 11/51] arm64/kvm: consistently handle host HCR_EL2 flags