Actually, there is already (proprietary) multitenancy support for the jvm that provide full isolation (minus JNI calls). See http://www.ibm.com/developerworks/library/j-multitenant-java... .

IIRC I saw some talks about introducing it in java9.