At the door
The host decides, every time.
The host explicitly accepts the connection before the session starts.
Host mode with an explicit accept
The host explicitly accepts the connection before the session starts.
Five permissions, decided at the door
The host chooses keyboard, clipboard, audio, file and restart permissions for each connection.
The settings pane behind its own password
Protect your client configuration with a dedicated settings password.