How could Ventura apply security patches to itself while still running, and not require a restart? Here’s what is likely to happen.