Something like Qubes [1] and its concept of security domains might help here.

[1] http://qubes-os.org/trac