Great move, this does allow "real" microsegmentation for VMs... at last.