And for your daily vkernel news…  Virtual kernels now are secure by default, meaning no loading kernel modules and no writing to kernel memory.  This is disabled by a command line flag at virtual kernel start time.  Also, Matthew Dillon realized that the virtual kernel automatically presents a safe way to cluster.