Be better to take control of it, and run it as a chunk of your hypervisor. (This is only possible if there's support for custom signing of device control. Clou

Be better to take control of it, and run it as a chunk of your hypervisor. (This is only possible if there's support for custom signing of device control. Cloud environments need to know that the security core is under the control of vendor signed firmware. (This provides cloud service providers with the inability to read their customers data and the customers with security.))