There is also the small issue of non-predictable timing (but this is
often already an issue for denormal operands and/or results), i.e. when
using this as part of anything crypto-related, you don't want a timing
attack to leak info about the secret key.