Longhorn promises to be a minimum privilege application. First, you should immediately write a hosted code. When you generate a desktop application, you have to match Lua (and use Windows Application Verifier to help check your work).
Click here to read the full story