[$] More efficient removal of pages from the direct map

The kernel's direct map provides code running in kernel mode with directaccess to all physical memory installed in the system - on 64-bit systems,at least. It obviously makes life easier for kernel developers, but thedirect map also brings some problems of its own, most of which aresecurity-related. Interest in removing at least some pages from the directmap has been simmering for years; a couple of patch sets under discussion show some use cases for memory that has been removed from thedirect map, and how such memory might be efficiently managed.