Improved nested virtualization handling and hardening support.

This release improves nested virtualization handling on VMX hardware and also adds support to build the KVM backend with hardening support.