hvm: create, save, restore, destroy pass with ao_how callback