reveal to vapi/vsm.h for it to work, and the truly private parts
needed to implement things internally (vsm_priv.h)