add an option to enable nested kvm