incorporated recent Kestrel changes to CertiKOS kernel module; added LynxSecure kernel module code