VMM: EPT checks, init, and basic usage

Does a bunch of checks in EPT initialization, so we don't have to
dynamically check as much (or program to handle older HW).

This will use one EPT per process, instead of one global, but this EPT
is still not fully integrated into the pmap ops.