Yep, that seems pretty spot on. Not sure yet how I feel about allowing sandboxed user code in the kernel (my gut doesn't like the idea) but much smarter people than me seem to think it makes sense so I guess time will tell.