Security startup isolates untrusted content in virtual machines