KVM: x86: expose CVE-2017-5715 ("Spectre variant 2") mitigations to guest