Block a user
TODO: Mark kernel pages as global to avoid flushing the TLB on address space switches
TODO: Alternate kernel stack to catch stack overflows before they triple-fault
kernel: Interrupts are disabled while in system calls and enabled in exceptions