Fix multiple CVEs related to privilege escalations on R/O connections

CVE-2019-10161: CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc-.patch
CVE-2019-10166: api-disallow-virDomainManagedSaveDefineXML-on-read-only-c.patch
CVE-2019-10167: api-disallow-virConnectGetDomainCapabilities-on-read-only.patch
CVE-2019-10168: api-disallow-virConnect-HypervisorCPU-on-read-only-connec.patch