Rather than authorising system-call access using a kernel check for a user
address space with ambient authority, use one of the user permission bits so
that system-call access can be managed explicitly by userspace.  This allows
userspace to decide how to define 'ambient authority' as it sees fit instead
of hard coding that definition in the kernel.