only run setfacl if /dev/kvm exists.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>