XenServer runs their version of qemu under a unique unused uid, in a empty chroot and with a separate network namespace. This is the default behavior under XenServer.