Correct, I put a whitelist on it because it effectevely gives anyone full control over the VM.