Securing the guest OS