Add a couple "xauth generate/remove" commands to the base PCDM toolchain. This should let us turn on the xsecurity on the server, and only authorize the current display (:0) by default.
Merge branch 'master' of github.com:pcbsd/pcbsd