An article which discusses this, and explains a bit why it isn't being 
implemented more:
http://securityfocus.com/infocus/1766