in particular, if an object is mapped private, DO NOT grant VM_PROT_ALL protections to it; it could be sensitive data.