Securing BPF programs before and after verification [LWN.net]