“post-Spectre rumors suggest that the %cr0 TS flag might not block speculation”(marc.info)