[RFC: vf-token 5/5] qemu: validate and generate vf-token on command line