Hypervisor-Enforced Kernel Integrity (Heki)

Proof-of-concept that implements new KVM features (extended page tracking, MBEC support, CR pinning) and defines a new API to protect guest VMs.