ui: ensure VNC websockets server checks the ACL if requested