One way to approach this question is to ask "how can I always cut and paste -something- from one regime to another?"

Take a look at capability protection -- it covers most of these cases reasonably well.