Switch to virtualized PIDs and lots of tests for security invariants