One that doesn't suffer from context switch penalty, but still provides separation of the kernel and the process?