1. A method for enhancing security of a host, comprising: providing a shared file system on the host, the host comprising virtual machines (“VMs”), the shared file system including an annotation scheme that enables a user to define security policies for at least one of (a) files and (b) data for each of the VMs; enabling a service console, coupled to the host and the VMs, to access the shared file system to enforce the security policies.