Would whonix fit that bill?