Fix xmlrpc call to find_free_prefix

VRF is sent as a separate positional argument to the backend function.
This can't have ever worked...