> Another point, if we download a vnc config file (like for spice), to open remote- > viewer, I think the password must but in clear in config file ? But only the user has access to that file? And it is a one time password ticket, only valid for 30seconds. So you you think this is a security risk?