Okapi: Efficiently Safeguarding Speculative Data Accesses in Sandboxed Environments