vCloud director VMs protected by Trend Deep Security

Hello,

There is a necessity to install Trend Deep Security to protect workloads on a vCloud director 5.1 environment. The only gotcha is that a Trend appliance must be installed on every single host you want to protect, and the vCloud resource cluster is suppose to run only  vCD workloads. By introducing non vCD managed VMs on the cluster there is potential problem as not all the resources are dedicated to vCD. I suppose I can create 2 resource pools on the main cluster and segregate the vCD resources but that is against the best practices.

Does anybody know a good alternative to this configuration, is there any way to make vCD aware of the Trend appliances?

Thanks,

Juan.