How hard would it be to make a VM that is on its own network but can share the internet connection to the building? For example if we wanted to grant someone access to a VM without allowing them in any way to see our network? Almost like a guest VM.