Maintain lifetime of proxy handles returned by the module
If the module returns proxy objects from an incoming call and releases last remaining reference to such proxies in process, the handles are invalidated before even read by the kernel. Need to make sure that such handles are kept until the kernel confirms it has read out the return data (same as with containers).