HALs are currently set on construction using this macro. Regrettably, this makes it difficult to derive higher HALs from lower HALs when the mutex holder is a virtual subclass. We should allow the HAL to be overridden at runtime.