Syscall ACL

[vercas]

There should be an ACL for syscalls, so only specific processes can use specific syscalls.
For instance, InitRD-related syscalls should only be available to the init process and filesystem server.

Typically, when a process spawns another, it should be able to specify an ACL mask, to limit permissions.