===============================================================
This file describes a list of conditions for running guest
code in the VM without Scan Before Execute (SBE) intervention.

The idea is that certain code, namely user code running at
guest ring3, is virtualized fairly well by the CPU.  If it
doesn't use do some real quirky stuff, it can potentially be
run with much less virtualization overhead, and thus much faster.

This list will grow as we think of and fill in more conditions.

When support for turning SBE off is in place, there should be
a config file option to control it.
===============================================================


All selector RPLs have to be 3.

All associated descriptors have to be DPL3.

All segment descriptor shadow caches have to be consistent with the
  guest GDT/LDT entries.

...
