We have an open source project for this: github.com/hyperhq/hypernetes. Basically use k8s to schedule hypervisor-based secure containers.