Also sounds like we can run multiple kernels at once during normal operations, to isolate processes.

So, could I run a second kernel for, say, Docker to use? Isolate those containers away from the host system kernel?