Currently reads:
$vmName = 'TstWindows'
$pass = 'u531@rg3pa55w0rd$!'
someone can come along later, and run 'history' to see the password that was used.
Better would be:
$vmName = 'TstWindows'
$pass = [Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR((Read-Host 'VM password' -AsSecureString)))
while the password will be stoerd in memory in plain text, running 'history' wont reveal the password.