Support for 'suspicious' VMs in ONC (OMS-89)