iommu: Add "iommu.strict" command line option