x86-urgent-2022-08-13

(not turned on by default), which also need STIBP enabled (if
available) to be '100% safe' on even the shortest speculation
windows.

Signed-off-by: Ingo Molnar <mingo@kernel.org>