Did some digging, Apple has supported vt-d on OS X since 10.8 (mountain lion). So anyone saying there's no support for it in OS X is just wrong, it's a requirement for thunderbolt to even work period and be secured. All thunderbolt devices get managed with vt-d virtual addressing on OS X to prevent DMA attacks.