guest agent: add RPC blacklist command-line option