xen/grant-table: add gnttab_try_end_foreign_access()