Is exec-shield protection on the KVM host relevant for VM memory protection?