1. A computing device for mutual application isolation, the computing device comprising: a processor with secure enclave support; an operating system loader module to load an application image to a memory range within a predefined virtual address range; an enclave loader module to (i) create a secure enclave, wherein the predefined virtual address range is assigned to the secure enclave and (ii) validate control flow integrity of the secure enclave in response to creation of the secure enclave; and a mutual isolation module to execute the secure enclave in response to validation of the control flow integrity of the secure enclave, wherein to execute the secure enclave comprises to enforce mutual isolation of the secure enclave and the application image with the secure enclave support of the processor.