KVM: SVM: Add support for CR8 write traps for an SEV-ES guest