[tf-rmm] Does the confidential virtual machine support hot-plug for CPU, memory, and devices?