qemu: safety mechanism before -loadvm