thought about that, but this does not apply to dispvms iirc, only appvms. you can do that in the dispvm template (that is just an appvm with an extra flag). Has some usability constraints and in my opinion the provided security is negligible compared to appvms.
I moved my thing about deanonymization to another post