1. A method for enhancing security of a virtual machine (“VM”) host, comprising: providing a shared file system on the VM host, the VM host comprising a plurality of VMs, the shared file system including an annotation scheme capable of defining security policies for each of the plurality of VMs; enabling a service console to access the shared file system to enforce the security policies.