Or separate machines. It's not impossible to maintain sufficient separation in software, but it's a lot easier to skip the whole mess.

Even still, I have to make sure my KVM switch is connected to the correct laptop. (Work on one side, personal on the other, and shared keyboard / trackball)