We might want to have some way of specifying in the manifest which VMs are allowed to talk to which other VMs, and enforce this in the hypervisor. It's not yet clear how necessary this is.

(Migrated from b/132421547.)