feature #3175: Fix spoofing with non-SG VMs