Initial kernel support for security contexts

[dbittman]

This PR adds basic scaffolding to the kernel for security contexts:

• Per-thread management of attached security contexts.
• Use security context IDs in upcalls
• Attach to security context
• Allow for different page-tables per context

This does not yet hook up any actual use of security contexts for permission checking, yet.