I'd be interested to hear more details of what this actually is. At the OpenStack summit a few years ago we were discussing how everything done in containers v

I'd be interested to hear more details of what this actually is. At the OpenStack summit a few years ago we were discussing how everything done in containers via cgroups today could also be done via KVM, for greater security. This sounds like it could be a step in that direction (?)