Second half of the CRT/key encoding
This was backward - we don't want GRO enabled if CTF is disabled
CTF check was backward; only check for it on the ARM architecture