* add vnc keymap parameter
 * add qemu.conf with cgroup_device_acl to allow qemu to access /dev/net/tun