1. A virtualization method comprising: intercepting a plurality of hypercalls for a host virtual machine and a plurality of guest virtual machines to a hypervisor, the intercepting being performed by a hypercall access control layer that is separate from the host virtual machine, and the plurality of guest virtual machines, that is included at least partially within the hypervisor, and that provides access control between the host virtual machine, the plurality of guest virtual machines and the hypervisor, wherein the hypercall access control layer comprises hypercall access control handlers implementing hype call access rules, wherein the hypercall comprises a software trap from the host virtual machine and/or one of the plurality of guest virtual machines to the hypervisor; and routing a respective one of the hypercalls comprising the software trap from the host virtual machine and/or one of the plurality of guest virtual machines to the hypervisor for execution on a hardware platform, responsive to the respective one of the hypercalls comprising the software trap from the host virtual machine and/or one of the plurality of guest virtual machines to the hypervisor passing the hypercall access rules, wherein the hypervisor includes a respective hypercall table that maps hypercalls comprising the software trap from the host virtual machine and/or one of the plurality of guest virtual machines to the hypervisor for a respective host virtual machine and guest virtual machine to hypercall handlers and wherein the intercepting comprises: initiating reloading the respective hypercall table in the hypervisor by the hypercall access control layer, to identify one of the hypercall access control handlers as the hypereall handier for the respective host virtual machine and guest virtual machine, wherein the respective hypercall table is separate from respective system call tables contained within the respective host virtual machine and guest virtual machines.