Use JNLP.
Strip logging from VNC to cut down on permiossions