The seL4 microkernel