x86: Enable -fcf-protection with multi-byte NOPs