An apparatus in a multi-tenant environment, comprising: a host server computer, the host server computer having a processor configured to execute a management hypervisor and at least first and second virtual machine instances; a first programmable integrated circuit within the host server computer, the first programmable integrated circuit being programmable to include hardware logic associated with the first virtual machine instance; a second programmable integrated circuit within the host server computer, the second programmable integrated circuit being programmable to include hardware logic associated with the second virtual machine instance; and a host integrated circuit between the first virtual machine instance and the first programmable integrated circuit and between the second virtual machine instance and the second programmable integrated circuit, the host integrated circuit mapping the first programmable integrated circuit to the first virtual machine instance and mapping the second programmable integrated circuit to the second virtual machine instance; wherein the host integrated circuit includes a first Peripheral Component Interconnect Express interface for communicating with the first and second virtual machine instances and a second Peripheral Component Interconnect Express interface for communicating with the first and second programmable integrated circuits (250, 252) and wherein the host integrated circuit includes management hardware positioned between the first Peripheral Component Interconnect Express interface and the second Peripheral Component Interconnect Express interface that encapsulates the first and second programmable integrated circuits (250, 252) so that secure information associated with the first programmable integrated circuit is not obtainable by the second programmable integrated circuit. a host server computer, the host server computer having a processor configured to execute a management hypervisor and at least first and second virtual machine instances; a first programmable integrated circuit within the host server computer, the first programmable integrated circuit being programmable to include hardware logic associated with the first virtual machine instance; a second programmable integrated circuit within the host server computer, the second programmable integrated circuit being programmable to include hardware logic associated with the second virtual machine instance; and a host integrated circuit between the first virtual machine instance and the first programmable integrated circuit and between the second virtual machine instance and the second programmable integrated circuit, the host integrated circuit mapping the first programmable integrated circuit to the first virtual machine instance and mapping the second programmable integrated circuit to the second virtual machine instance; wherein the host integrated circuit includes a first Peripheral Component Interconnect Express interface for communicating with the first and second virtual machine instances and a second Peripheral Component Interconnect Express interface for communicating with the first and second programmable integrated circuits (250, 252) and wherein the host integrated circuit includes management hardware positioned between the first Peripheral Component Interconnect Express interface and the second Peripheral Component Interconnect Express interface that encapsulates the first and second programmable integrated circuits (250, 252) so that secure information associated with the first programmable integrated circuit is not obtainable by the second programmable integrated circuit.