All that is needed here is to grant real communication function and perhaps modify privileged code to provide access to these resources via capabilities. In KeyKOS Tymnet was connected to the computer via a channel and there was a general mechanism in the kernel (privileged code) to provide rescindable access to a device on such a channel. Code to demultiplex Tymnet access was outside the kernel.