as for using this for secure JIT support, it's not going to cut it, the proper way is out-of-process JIT (in general, the generator and consumer address spaces must be separate, among others).