Paul,
What a wonderful module to bring some order to all this mess.
I am just wondering looking at the .xs, do you really want
to
on those failures? Update: Indeed I see your intention : " This makes it difficult for a careless program to continue to operate after it has failed to successfully manipulate its privileges, and potentially perform undesirable operations." - from a security POV very nice, from a robustness angle no no! Tricky call, since robustness and security are desirable.