"The guest system (`` domU""in Xen terminology) needs not be aware of this process."
"If the VPS provider employees are intent on having a look at your machine without being detected, well, they technically can: they``just""have to make a live copy."