1. An article comprising a non-transient machine-accessible storage medium including instructions that when executed enable a system to: launch a first virtual machine manager (VMM); authenticate a launch of a second VMM; and nest the second VMM within the first VMM; wherein authenticating the launch of the second VMM includes bypassing the first VMM while both (a) invoking a second launch control policy module (LCPM), and (b) using a hardware security attestation module.