KVM: SVM: Add support for CR4 write traps for an SEV-ES guest