Control-flow flattening preserves the constant-time policy