Is Linux KVM good enough then? I know it depends on HW features for isolation, but so does normal process isolation.