KVM: x86/mmu: Add explicit access mask for MMIO SPTEs