[freedomben]

Yep, I could see this being a nice option if you're running something very security sensitive and want some extra defense by isolating the kernel.