randprotect: KVM: micro-optimize mmu notifier change_pte

__handle_change_spte has been optimized to allow a change of spte pfn
if both old and new spte are wrprotected as it's the only case that
is safe and allowed to materialize here.

Signed-off-by: Andrea Arcangeli <aarcange@redhat.com>