Maybe try https://github.com/debauchee/barrier instead of a KVM?
Maybe part of the reason this problem is less common than I'd imagine is because companies are not typically as strict on what you install on your work machine? My last job certainly was.