Depends: If it's a deck, I like the virtual machine module in the exchangeable slot and a hardwired encryption module (Firewall is the most targeted attribute after all)
On a commlink: Virtual Machine hardwired. Agent + S&M + Stealth Dongle, Toolbox for searches, Wrapper for all your slaved gear and all the other program goodies.