until all the broken kvm tools are fixed this change really must stay as-is. if someone truly wants this level of security they can choose it, but it's not OK to break basic features by default in the name of security. .mrg.