I don&#x27;t know enough about bhyve or your implementation to be able to comment, but if you assume that any system that has ever received a ZFS stream from a user is entirely compromised, then perhaps you can work around it that way.  I&#x27;m not aware of a disappearing snapshot problem; has there been something sent to the ZFS list about this?  Would have been a good topic of discussion for the OpenZFS Developers Summit a few weeks ago... ;)