There are a few reliable ways to detect if the host is a VMWare guest.
The ones below make the most sense.
First choice:
    "vmware_guest" expression      =>     returnszero("/bin/grep -qi vmware /proc/scsi/scsi","noshell");
Second choice:
    "vmware_guest" expression      =>     fileexists("/usr/sbin/vmware-toolbox-cmd");
