They need to get away from Xen. Modern virtual HW & SW security tech should allow this very, very soon.