KVM security: add global constants