Rethinking the Linux cloud stack for confidential VMs