Perspectives: Security and the Separation Kernel