putting the TSTK above the user stack is what the alpha and ppc kernels do. but just looking for a hole in exec seems also good. also note that you dont need a whole USTKSIZE window. only TSTKSIZ (or spage) window is fine for the upper half of the temporary stack because thats what exec accesses.
-- cinap