Interesting - I somehow didn't realize that KVM didn't require root access.

Also, I wonder if this could be adapted to use Apple's Hypervisor.framework. That one also doesn't require root and ought to be able to spin up and down very quickly.