shadow: fix RDP security