[PATCH 09/11] reserve extra memory when SME or SEV is active