Caveats

• Finalisers from different netlets run on the garbage collector thread. This can be exploited for denial-of-service attacks. Also, it is unclear whether a netlet can always pay for its finalisers.
• It would be useful to dynamically extend a netlet's codebase as in RMI, although that would be a big security hole.