only open up a listening socket in non-bird mode
have vmcloak-clone wait at most 5 minutes per vm