Hi,
I also want to keep the code as a module, both to avoid doing VMXON unconditionally,
can you expand on what the problem is with having VMXON unconditionally enabled? A lot of things are much simpler if it's on at cpu up, and turned off only at the down path (be it offline of kexec).. no refcounting, no locking, etc... so would be good to understand what the problem would be with having it always on