KVM: x86 emulator: Add check_perm callback