More progress: can actually run kvm now with nfdhcp rules
Need to do isolation rules, check the TODO questions and then support Xen, OSV