Previously it was in both qubes_core_appvm and qubes_core_netvm; somehow counterintuitively, qubes_core_netvm executes on appvm, too. So move it to a common place.