If we are to isolate and insulate our users from the reality of the system software, we must take great pains to ensure that isolation is complete.