With VM's they could be created just by doing locking (without passing a config yaml) and things were set via arguments instead. I guess technically that isn't done for baremetal but is there a big reason not to protect against it if it does it in the future?