KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are created