Wow, I didn't know about PVM! So this should finally allow nesting of container/VM sandboxes?