vm: make Vm.stats public

future patches want to make use of it.
Moreover, to have it public actually reduces coupling.
clientIF: add API to get all registered VMs

add an API to extract all the registered VMs in
the safest possible way.
Must *not* be a deepcopy.