if it's being loaded at hypervisor layer via vfio-pci, then within the KVM VM it loads the nvidia binary blob, even if at the KVM layer it has kernel space privs, at the hypervisor layer it does not.