From the standpoint of someone with root access to a
dedi with OpenVZ vms, finding hidden services that are
hosted by customers is a matter of looking for files
named private_key anywhere under the /vz folder.
[...]
2. Cross your fingers and pray really, really hard that
the money trail is correctly obscured.
Hetzner is a popular German hoster and as far as I know payment requires either a valid credit card or a German bank account. How is it possible to obscure the money trail at all?