Training Solo: On the Limitations of Domain Isolation Against Spectre-v2 Attacks