Nvidia H100s implement TDX for this.
I have to wonder if there's virtual partitioning so a device can reserve / lease a context within itself to a virtual machine resident elsewhere, rather than the whole card.
I also have to wonder what the latency might be on connecting new sessions between