You could even trust the flag and eat them here. That way you don't even need to implement all of them for things to start working. I think?

We already catch all the ops that can possibly *modify* the prefixes so it should be possible to be "smart" about them even when dropping to interpreter.