Use/Test this by loading the user space elf from the kernel process before it starts rather than as a part of the first thread. This simplifies thread start a fair bit.
This instantly creates a page fault as we always map pages with ring 0 permissions.
Don't yet jump to userspace.