There was originally a mistake:
 * restoring JVM did restore the image
 * the restored JVM started checking whether CPU Features of the new host >= CPU Features of the checkpoint host

That is difficult as glibc is already configured (IFUNC) in the image for the checkpoint host and calling any such glibc functions in the restored image will crash (as the advanced instructions from misconfigured IFUNC are not available). Some glibc functions had to be reimplemented in a dummy way inside JVM due to this misdesign.

This patch changes it to:
 * restoring JVM checks cpufeatures user data in the image against current CPU Features
 * the restored JVM is started only if the CPU Features are satisfied, restored JVM no longer has to verify anything

The patch is a bit of a kitchen sink, there are various improvements of the CPU Features code.