[Users] Bridge w/o IP address?

[Blaster]

I want to put multiple VMs on the same hypervisor, some will be Internet 
facing, some will be internal facing.

I obviously don't want the hypervisor to be an attack vector, so I don't 
want the HV to have an IP address on the DMZ network.

Is this configuration as simple as creating another another bridge like 
the ovirtmgmt bridge, not giving it an IP address, and adding it to the 
DMZ facing hosts?