RDP to a Windows VM over IAP: serial port 4, NLA and a certificate you can’t check (medium.com)