x86-64/Xen: eliminate W+X mappings