Why all remote nodes must be trusted

To ensure that migrated (guest) processes are not tampered with while running in remote clusters of a multi-cluster.

Note that guest processes run in a sandbox, which prevents such processes from accessing local resources in the hosting nodes.