Implementation: started system calls, security manager