KVM: MMU: Use different shadows when EFER.NXE changes