i386: hvf: Explicitly set CR4 guest/host mask