KVM: Disable CR8 intercept if tpr patching is active