safety checkpoint from vm