KVM: SVM: Add support for CR0 write traps for an SEV-ES guest