OSTEP, Chapter 6: Mechanism: Limited Direct Execution