one vm to rule them all