AKS now allows you to isolate workloads at the kernel level.