Boots the ISO with a blank disk on virtio-scsi, the same controller the
hosting has, and confesses the install over port 23: DskPrt C and D,
copy the Temple to both, BootHDIns compiles a kernel for each,
BootMHDIns writes the MBR.  --vmdk converts it for the hosting, --test
boots the disk alone, writes a file, reboots and checks it persists.
It does.

confess.py takes CONFESS_TIMEOUT now.  Compiling a kernel under TCG is
slower than the CIA reading your mail.