Mitigation of side-channel and microarchitectural vulnerabilities often requires hardware microcode or firmware updates and is often accompanied by performance loss.