SeiraOS — the runtime that says no.