- Maybe the mouse pointer should be changed in the VNC java applet:
 http://www.rgagnon.com/javadetails/java-0228.html
- When creating a VM, do not copy the desc from the template

- Web UI: the create page should select no template by default to force
  the enduser to pick one
- Web UI: ability to create templates, delete templates/VMs
- Web UI: start/stop multiple VMs from the search page
- Web UI: edit VM metadata from the search page
- Web UI: show template desc in /create page
- Web UI: each VM should show or let the user edit: qemu ram/cmdline,
  node, snapshots, hostname/IP
- Web UI: arbitrary monitor command
- Web UI: ability to disconnect someone who is connected via VNC

- I once saw in qwrapper.log:
    (qemu) info vnc
    info vnc
    VNC server active on: mrsq.tor.rapid7.com:6
    No client connected
    (qemu) Can't use an undefined value as a symbol reference at /usr/local/bin/qwrapper line 38.
  This is appears to be caused by $wbuf_to_client being undef:
    37:while (length($wbuf_to_client)) {
    38: $bytes = syswrite($client, $wbuf_to_client, 4096);
    39: last if !defined($bytes);

- Fix that potential race condition: when starting Qemudo, there is a period
  of time during which it re-attaches itself to the guests already running
  in the background and during which it is not aware of which VNC ports are
  in use, so if a guest is immediately started up from the UI, Qemudo may
  assign it a port that is actually already in use.
- Searching for "tags:a tags:b" will only search for tag "b", not "a and b".
- Do not allow the creation of empty tags.
- Delay the attempts to connect to qwrapper sockets after forking (see
  comment in init_postfork).
- Figure out how to prevent Firefox 1.5 from caching the form fields
  (e.g. concurrent edits of the vm name)
- When saving metadata, write to a temp file + mv
- Should tags from private VMs be exposed through the tag statistics ?
  Currently they are.
- Do not list private templates an enduser doesn't have access to in /create,
  when a VM is created from a template, verify the enduser perms on the template
- when the 'state' field is written to, there is never any check for
  if it is already set to another value