pub fn monitor_rt_load_compartment(
    root_id: ObjID
) -> SecGateReturn<Result<Descriptor, LoadCompartmentError>>