hostmem-memfd: disable for systems without sealing support