only the M1 Max can't do nested virtualization (needs M3+)