What is the best practice for SEP clients when it comes to having a Desktop with a VM instance running on it?
Yes, you would require SEP on both the desktop and the VM itself. The reason is SEP is protecting only the OS it is installed on, and not the Guest VM running on that machine.
Every instace of SEP client counts toward the license count you have purchased.