OSPKE
OS has set CR4.PKE to enable protections keys (and the RDPKRU/WRPKRU instructions).