The always-alive console session held the user's single plasmashell and black-screened RDP. Live conf removed, staged/apply-guest.sh step now removes it instead of writing it, REBUILD KDE policy updated. Console shows the greeter at boot; RDP is the primary desktop; Sunshine will get a kiosk account or XFCE when it lands. Details: https://projects.knownelement.com/issues/611