Shielded Virtual Machines are a great new feature in Hyper-V 2016 - set them up properly on stand-alone hosts using this guide to protect against tampering.