A real OS user-land kernel handling real workloads within the capability model.

A Linux VM isn't it.