kernel - Implement spectre mitigations part 1