hypervisor protection