Despite the volume of messages on this thread about securing C or replacing it with a safer language for systems implementation, I think your answer is the only practical one.

If you haven't seen it already, you might want to check out HiStar:

http://www.scs.stanford.edu/histar/