Reply to Message

or you could provide a workstation just outside the secure room with desktop shortcuts to reboot the vm's via locked down scripts.
Distinct workstation makes it relatively easy to secure, and means that users only reboot the app when it is really dead because they have to get off their backsides to walk to the machine.
And you can use the script to gather an audit trail of who and when (you know the where) requested the restart.