Your comments

I vote for fixing loophole, too (i.e. AlwaysEndSessionOnExit  being overriden by killing ScreenConnect.WindowsClient.exe, as mentioned by pfp).  I didn't test it myself, so can't vouch for the steps.

Thanks!