KVM: s390: Add a function for checking the low-address protection