This is worth bringing up again. As a Guacamole admin I have the ability to click on any connected user sessions and view/control without the user's permission.
This is preventing us from completely eliminating MS RD Gateway for HR security reasons. /c
