LV1_DENIED_BY_POLICY
(err == LV1_DENIED_BY_POLICY) ? " (hypervisor protected)"
if (err != LV1_DENIED_BY_POLICY)