On amd64, a hack sets td_critnest to 1 in hammer_time(), and then clear
it before returning from hammer_time(), which is too early. Instead,
set TDP_NOFAULTING for thread0 early, and clear the flag after vm_init()
finished.
Other arches might follow this pattern.
Noted by: adrian