protection keys. For instance, before calling pkey_free (2), the application should be sure that ... allows in-use pkeys to have pkey_free (2) called on them because it would