Right now, the vnc proxy sits on the controller only.
I suppose eventually we could try to run a proxy on each
machine directly, if that's possible... but for now keep
it simple (and high-latency ;)).