Idea: Program Blessing (SF issue)

[tanabi]

Instead of relying on the existence of SCARY_MUF_PRIMS
to handle access to things like PROGRAM_SETLINES and
TOADPLAYER, why not force them to only be allowed if
the program is blessed? That way, if the text is
changed in any fashion, the program can't run that set
of primitives.

TOADPLAYER should be M4+ (I'm using the plus sign to
designate blessing), but PROGRAM_SETLINES should be
M1+ (so that people can write programs to modify their
own programs, even at M1.)

[wyld-sw]

For context, SCARY_MUF_PRIMS was taken out as a #define in part since users of the Winfuzz binary couldn't enable it. Program blessing is definitely an interesting idea worthy of discussion.