+1, if your threat model is actually this severe, use physical hardware with physical interlocks and physical security mechanisms. Software/virtualization is j

+1, if your threat model is actually this severe, use physical hardware with physical interlocks and physical security mechanisms. Software/virtualization is just helpless against such a threat model.