At the time, I was considering TorBOX as an option for hosting a secure hidden service. You can run headless instances of VirtualBox on a server, just remove all the GUI components on the workstation. Ultimately I decided two physical machines was safer and actually less complicated to setup. He's a short discussion about securing hidden services: http://dkn255hz262ypmii.onion/index.php?topic=100998.msg705761#msg705761