x86/boot/compressed/64: Call set_sev_encryption_mask() earlier