In my initial bug submission, I indicated I saw the problem in version 4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u9, as that was what my system was running when I first noticed Xen ignoring type = 'pvh'.
I saw there was an update: 4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10. Since it looks like it's using a newer upstream version, I wanted to check whether it also ignores type = 'pvh'. I could imagine maybe some of the comet changes were merged in... But, even with the deb9u10 package, I'm still seeing that DomUs will boot in PV mode when their configuration specifies type = 'pvh'. --Keith Bare