KVM: xen: flush deferred static key before checking it