<cpu mode='custom' match='exact'>
  <model fallback='allow'>Cascadelake-Server</model>
  <vendor>Intel</vendor>
  <feature policy='require' name='ss'/>
  <feature policy='require' name='vmx'/>
  <feature policy='require' name='hypervisor'/>
  <feature policy='require' name='tsc_adjust'/>
  <feature policy='require' name='umip'/>
  <feature policy='require' name='pku'/>
  <feature policy='require' name='md-clear'/>
  <feature policy='require' name='stibp'/>
  <feature policy='require' name='arch-capabilities'/>
  <feature policy='require' name='xsaves'/>
  <feature policy='require' name='ibpb'/>
  <feature policy='require' name='amd-ssbd'/>
  <feature policy='require' name='rdctl-no'/>
  <feature policy='require' name='ibrs-all'/>
  <feature policy='require' name='skip-l1dfl-vmentry'/>
  <feature policy='require' name='mds-no'/>
  <feature policy='require' name='pschange-mc-no'/>
  <feature policy='require' name='tsx-ctrl'/>
</cpu>