<cpu mode='custom' match='exact'>
  <arch>x86_64</arch>
  <model fallback='forbid'>IvyBridge</model>
  <feature policy='require' name='ss'/>
  <feature policy='require' name='vmx'/>
  <feature policy='require' name='pcid'/>
  <feature policy='require' name='hypervisor'/>
  <feature policy='require' name='tsc_adjust'/>
  <feature policy='require' name='xsaveopt'/>
</cpu>