Make invirt-update-vnc-cert more robust to failure