Don't we need a software BHB-clearing sequence on VM-exit for Intel parts that don't report IA32_ARCH_CAPABILITIES.BHI_NO? What am I missing? https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/branch-history-injection.html
