This class must be implemented by the vm vendor, or the reference implementation can be used if the documented native is implemented. Checks access to system resources. Supports marking of code as priveleged. Makes context snapshots to allow checking from other contexts.