sip.ssip should only be writable when delegated

This doesn't matter for the usual Linux use case, but it doesn't match
Spike, so it should be fixed.

The ISA spec is a little ambiguous about the correct behavior here, but
at least this way, the sip and sie CSRs behave the same as each other.