Rex: Closing the language-verifier gap with safe and usable kernel extensions