You need a HW encoder per VM, which means vGPU/SR-IOV for anything multi-tenant. But it would work similar to qemu-rdp (which is a better codebase and really, the successor to SPICE): -display dbus can get the framebuffer to any external process, so a Moonlight-protocol server could attach there. Nobody's done it that I can find.