...so the guest cannot read the hosts's TPR. Unless one of these is set, the rest of VMCS_PRI_PROC_BASED_CTLS doesn't actually get written.