vmrescue

Root on every managed hypervisor. Keep this behind HTTPS and strong credentials.