<cpu mode='host-model'>
  <model fallback='allow'/>
</cpu>