x86/iopl: Fix iopl capability check on Xen PV