KVM: SVM: set NM intercept when enabling CR0.TS in the guest