Shift software-defined page-table entry bits out of the upper two bits of
the TLB EntroLo layout -- while these values never made it to hardware (as
they are masked), we now use those previously undefined bits for TLB
protections relating to loading and storing tagged capabilities.  This
should not cause a visible behavioural change, but now allows us to start
setting those hardware-defined bits in PTEs.