Kernel Isolation: From an Academic Idea to an Efficient Patch for Every Computer