On Windows 10 v1803 (i.e. April 2018 update) when importing a PFX, an option like
[ ] Protect private key using virtualization-based security (non-exportable)
appears on the import wizard. What is the underlying technology and it's mechanics from security perspective?