target/arm: Honour VTCR_EL2 bits in Secure EL2