Securing virtual network function placement with high availability guarantees