Force QEMU VNC to listen only on localhost