Flynn's upcoming User/ACL model should cover multi-tenancy AFAIK.
Due to the security posture of the Linux kernel, we won't recommend running untrusted code side-by-side on the same hosts as more sensitive workloads, but we plan to harden everything to the maximum extent possible.