I can see how this design might isolate allocated resources, but how does this design prevent a malicious agent from just requesting all free resources and DoS'ing the system other than by having a fully pre-allocated static configuration?