Right now, I tunnel VNC through SSH. Is that overkill? Is the default VNC protocol encrypted?