Add two new ideas: audit support for IP firewalls (and other kernel
subsystems other than system calls), security regression tests.