hardened server: +app-emulation/libvirt ~amd64