Set '--cpu host' if host CPU supports nested virt (i.e. has either svm
or vmx flag)