that's exactly what confidential vms are