1. In a computing system comprised of virtualization software including a guest operating system (OS), a method for operating wherein virtualization software address space is distributed in guest OS address space that comprises: granting the guest OS execute, but not read or write, access, to pages in the virtualization software address space.