Kernel support for control-flow enforcement

It doesn't seem impossible to reimplement, just fiddly. And CET is fiddly too, and, uh... weak. Distinctly weak. (Mind you, RAP requires thinking about every language you implement it for -- but not all that terribly much, and CET requires compiler modifications too, so that's a wash.)