protected domain for tap for vmm vms

Hello,

I was checking bridge's protected domains and I'm curious
how to add VMM VM's tap into a VMM switch/bridge protected domain.

It seems it's not implemented yet.

I wanted to achieve this:

- multiple VMM VMs in same switch/bridge
- VMs cannot talk to each other inside the bridge
hence protected domain
- VMs can access uplink via bridge's vether

Jiri