vnc needs nolisten/ssh useless on localhost

VNC is would listen on port 6001 so it needs the nolisten tcp flag.
SSH on localhost option is not really ideal since most people will want
to connect to device over their networks.