What if I read the sites TLS/SSL keys? I could MITM the connection and inject JS to do more malcious thing. Or even easier get the ssh key for the VM. Then do

What if I read the sites TLS/SSL keys? I could MITM the connection and inject JS to do more malcious thing. Or even easier get the ssh key for the VM. Then do what ever I want.