xrdp-ng: start applying bounds