Nope! Still possible to "get out". I want a kernel-level solution!