Isolate security functions enforcing access and information flow control from nonsecurity functions and from other security functions.