Privilege Separation

Exporting dynamically allocated state:
Provide an allocator that uses shared memory.
Allocator state is kept in shared memory, too.
On child exit, parent fixes up allocator state.