Bpf And Spectre: Mitigating Transient Execution Attacks - Daniel Borkmann, Isovalent