1. A method, comprising: receiving a plurality of command messages through a control channel, wherein the plurality of command messages includes one or more criteria; reconstructing the plurality of command messages to determine an intended command for configuring one or more virtual machines on a server device, wherein the intended command corresponds to an operation defined in a policy database; determining whether the plurality of command messages are received from a control proxy, wherein the server device is disabled from performing operations associated with the plurality of configuration commands based, at least in part, on whether they are received from the control proxy; determining if the operation is permitted by comparing one or more policies associated with the operation to the one or more criteria; and sending the plurality of command messages to the server device if the operation is permitted.