So in essence, this is somewhere between a unikernel+firecracker combo and a WASM module, but using VT.