arch: make sure not to set NX-bit when it is reserved