[PATCH AUTOSEL 4.9 24/27] iommu/vt-d: Check capability before disabling protected memory