KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN