Added X display access control for backend popups.
Xhost is set by vpn-gui/gui.sh, but we can't rely on the GUI being started before the first popup.