Protect the System Call, Protect (Most of) the World with BASTION