This looks valid at first glace.
I recommend:

• avoid all extensions in anything and everything
• put different contexts each in their own VM