• Decide what to do when Secondary VMs misbehave with the shared memory, devices, etc.
• Revoke access/return memory when a VM crashes.
• (lower priority) consider resetting to stub image if secondary is killed.

(Migrated from b/132420426.)