target/arm/cpu64: Ensure kvm really supports aarch64=off