Further strengthening PC security, Intel VT allows for separate independent hardware-based environments inside a single PC so IT managers can create a dedicated, tamper-resistant service environment – or partition – where particular tasks or activities can run independently, invisible to and isolated from PC users.
http://www.pocket-lint.co.uk/news.php?newsId=3143

<tinfoil hat>Doesn't it sound as though the much hated TPM module
has finally come of age and is now headed for a computer near you?</tinfoil hat>