Missing sfence.vma U mode coverage

sfence.vma should cause an illegal instruction exception when executed in U mode. As far as I can tell, we don't currently have a coverpoint for this.