also do the inverse: make sure references or pointers to device memory are never accessed by the host.