@gsuberland @ryanc And however many delay slots worth of them due to microcode shenanigans, and the debug registers (you can use them to store keymat if coldboot and DMA attacks are in your threatmodel).