In-process sandboxing of the majority of QEMU via WebAssembly or similar
Additional information:
This would be in addition to other sandboxes, such as sVirt.