That's actually pretty cool! But really same mitigation should just happen on the normal syscall path for an even smaller perf impact.