Disable default access + block spiceproxy
Disable bloat
systemctl stop rpcbind.service systemctl disable rpcbind.service