It should be noted that Knox is being baked into AOSP, so it's presumably in Google's hands now.