A Lightweight Isolation Mechanism for Secure Branch Predictors (Full Report)