kernel: ensure VFIO related suboptions are disabled