Yeah, that is a risk I'm willing to take in my environment given I'm the sysadmin for all of them, so if somebody/code other than what I need/want to execute in the VMs, then I have other/bigger security problems :(=)
Great idea, was thinking about that, but currently the cost/expense not worth...