When the CFG is not unlocked, the patches should be applied according to the config file settings, rather than enabling the default patches.

[Z-fly]

<key>KernelAndKextPatches</key>
	<dict>
		<key>AppleIntelCPUPM</key>
		<false/>
		<key>AppleRTC</key>
		<true/>
		<key>KernelPm</key>
		<false/>
		<key>KernelXCPM</key>
		<true/>
		<key>PanicNoKextDump</key>
		<true/>
	</dict>

When the CFG is not unlocked, Clover always enables these patches. However, my config file has AppleIntelCPUPM and KernelPm disabled.

https://www.insanelymac.com/forum/topic/344035-cfglock-unlock-msr-0xe2/page/4/

[SergeySlice]

Even if MSR 0xE2 is absent or already unlocked there are good reasons to make patches for macOS to exclude modify this MSR by kext (AppleCpuPmCfgLock) or by kernel (AppleXcpmCfgLock) because these modifications are intended for Apple's hardware and bad for Hackintosh. I don't think you asked this parameters for real Macs.