You make the various hardware modules security context aware. You then give the host a separate security context from guests. You need a trusted hypervisor to

You make the various hardware modules security context aware. You then give the host a separate security context from guests. You need a trusted hypervisor to bootstrap it.