KVM: VMX: simplify NMI mask management