Deprivilege hypervisor (don't run it as root)