Pretty sure there is no VM involved... there'd be no reason to virtualize your storage nodes. But yeah, you are right that if you kept the keys and did the enc

Pretty sure there is no VM involved... there'd be no reason to virtualize your storage nodes. But yeah, you are right that if you kept the keys and did the encryption on the second server, you'd have to do the attack on the second server; but that's really just moving the problem around.