It would be good if we supported the [memsec](https://docs.rs/memsec) crate. This requires a POSIX-like [mprotect](https://pubs.opengroup.org/onlinepubs/9799919799/functions/mprotect.html) at least.