Decided to go with a NUC7i7DNBE board.
We don't need graphics virtualisation, but will need to pass through USB 3.0 and possibly PCIe devices.
The application is software-defined radio, where we will need to have a VM with real-time performance which is hosting the DSP/PHY part of the stack, plus a second non-RT VM which hosts other applications. Any pointers as to good starting points and best fit existing usage scenarios etc. would be much appreciated.