Unfortunately, xe autobinds to the created virtual functions, at least when the physical function is used by the host. The rd.qubes.hide_pci kernel argument only works if you do not intend to use the physical function by the host, as the virtual functions have not been created yet.