No. The VM does not have the key. The hardware has the key and only that core can run it. Practically, someone can take the die apart, xray it, and get the key. At that point they have access to the code that was was on that cpu -- maybe -- but you can avoid total loss by distributing across a large number of cores. The intel implementation was broken, but the idea is pretty sound. Seriously, read the papers.