winon now runs vms using sockets and user instead of tap ... easier to
secure, less to debug, no networking headaches