xen: set _PAGE_NX in __supported_pte_mask before pagetable construction