Isolated userspace

[ramidzkh]

• Userspace should not have access to any memory not specifically assigned
• Userspace should not have access to any IO not specifically assigned
• Userspace should not have access to any privileged instructions or registers not specifically assigned
• Userspace should not have access to any memory assisted by syscalls, e.g. kernel printing from an arbitrary address