Fix propagation of ref/changed bits out of the page table. Thanks to
Geoff Levand of SCE for explaining how lv1_read_htab_entries() works.

Unfortunately, this does not fix some userspace programs from crashing
after a fork()...