1. A method performed by a computer system, wherein the computer system executes a hypervisor and a first virtual machine, and wherein the first virtual machine hosts a guest operating system, the method comprising: transmitting to the guest operating system, by the hypervisor, a message that identifies a memory location for storing secure data; receiving by the hypervisor, after the transmitting of the message, a direct-copy command to clone the first virtual machine; and in response to the direct-copy command, creating, by the hypervisor, a second virtual machine via direct copy of the first virtual machine, wherein the second virtual machine is not provided access to the memory location during the creating of the second virtual machine.