Protecting against the new “L1TF” speculative vulnerabilities