DO

• Create threads to call untrusted PDX entry points

DON'T

• Create 'Server' threads


• Let others create threads in your APDs


• Give others capabilities to your stack or heap