Generalized address-space isolation

I would really like to see zero performance impact for opt-out systems. Mlfa is the most used tuning we have on all machines without untrusted code access (databases, firewalls, etc)