Something else. We are actually sandboxing dynamically loaded applications in a hybrid CAmkES environment, while using CAmkES as a way to help statically analyze and componentize the rest of the userland services.