I don't know that I would suggest COW mode,but you might look at SKAS mode which has much better performance.

That coupled with some grsecurity patches and you get around some of the security issues introduced by SKAS mode.

Or, there's always BSD's jail which is fairly efficient.