Distributed Real-Time Fault Tolerance In A Virtualized Separation Kernel