xen Use CFLAGS from /etc/make.conf rather than the default Xen CFLAGS (not supported) Enable support for PAE kernels (usually x86-32 with >4GB memory) Enable the Xen Security Modules (XSM) Enable the ACM/sHype XSM module from IBM Enable the Flask XSM module from NSA