An Architecture for Flexible, High Assurance, Multi-Security Domain Networks