Another solution would be the same one I used in Open2X. If it works, I think it is the best solution because it works reliably 100% of the time and cannot be overridden, has little overhead, and is perfectly reconfigurable:
You modify the kernel so that a custom userspace daemon can take...