Machine Identity Isolation