Add vfork support
Clean up process switching

Use the inner sharable tlbi operation and add the requires dsb and
isb instructions around the tlb flushing.
Invalidate all TLB entries in pmap_protect

This is more than we need to invalidate, but it gets us a working
userland.
Spell out wired in the flag name

It's easier to remember what the flag is for this way.