I'm planning on writing an fs_filter server for the desktop environment I'm developing. The server will combine access to multiple filesystems, much like the vfs server. I want to implement this feature in such a way that a misbehaving filesystem driver can't make the server hang. How should I do this?