QWT-NG 4.3.13 (agent d3273de)

Two fixes that were never actually shipped

An audit of the whole project log — prompted by noticing that resizing a qube window still
played the Windows device-connect chime — found two changes that had been recorded as done but
only ever applied by hand to a test machine. Neither ever reached a release. Both ship now.

1. Resizing no longer beeps. Every resolution change makes the display driver reload its
   mode list, which Windows treats as a monitor being plugged in, so it plays the device
   connect/disconnect sound. Those three sound events are now silenced for the live user, every
   profile on the machine, and the profile new users are created from.
2. The guest no longer locks its own session. A Windows lock screen is drawn on the secure
   desktop, which this agent deliberately refuses to show to dom0 — so an idle lock left the
   qube looking frozen with no way back in. dom0's screen lock is the one that protects your
   machine, and a guest lock only invites typing a password into an untrusted VM. Prevention
   existed in the tree for weeks but was never included in the installer; it is now, and the
   install log reports what it changed.

The audit checked ~111 other "we changed X" claims across 18,400 lines of log; every one of
them had a real implementation. The rule going in: a change applied by hand to a test machine
is not a fix.

Every dom0 setting is now documented in the README

service.enableWinKey, service.gui-fullscreen, service.hideGuestTitleBar,
service.gui-agent-debug and service.uac-disable are listed with what each does and when to
use it — including that service.uac-disable is the Windows equivalent of passwordless sudo
and must be set on the template, since an AppVM's system drive is restored from its
template at every boot.

Also documented: what is deliberately not configurable. A UAC prompt is always drawn on the
normal desktop, which makes it an ordinary window — standalone in seamless mode, inside the
desktop window otherwise. Windows' secure desktop is never shown to dom0 in any mode; that was
the "unclosable black window" fixed in 4.3.11.

Still open

Resizing is still slower than it should be, for the same reason it used to beep: the driver
reloads its mode list for every new size. The sound is gone; the pause is being worked on.

Install

RPM in dom0, or the ISO/tarball inside the template; let the template shut down at the end.
In-place upgrade from any 4.3.x. Hand-created qube? qvm-features <qube> vmexec 1 and
qvm-prefs <qube> qrexec_timeout 1800 in dom0 (on the template; AppVMs inherit).