KVM: x86: Allow userspace to opt out of hypercall patching