Rollback support for critical kernel operations

[sangho2]

My understanding is that, at least for now, LiteBox kernel platforms' goal is not fail-safe. However, fail-fast is also not desired because one of our target platforms (e.g., cloud VMs) is critical.
#817