policy for vino server (based on current rawhide policy)