That achieves nothing. A hypervisor can see and manipulate any VM it runs. By extension, a compromised kernel can do the same.