xen/pv: support selecting safe/unsafe msr accesses