Safe Sharing of Fast Kernel-Bypass I/O Among Nontrusting Applications