Guides on running macOS VMs always seem to involve downloading some EFI build with opaque origins. Is there a safer option?