Allow (authorized) system calls; split arch-specific parts into separate file (not done yet)