How to create KVM guest with SPICE graphics but TLS disabled using virt-install?

I am using virt-install (see below) to create a guest. All seems fine up to the point where it complains about auto-allocation of the SPICE TLS port. Here's what I am running and the full output: # sudo virt-install --name vmname --ram 1024 --os-type=linux --os-variant=ubuntutrusty --disk path=/data/vm/vmname_sda.qcow2,bus=virtio,size=10,sparse=false --noautoconsole --console pty,target_type=virtio --accelerate --hvm --network=network:default --graphics spice,port=20001,listen=127.0.0.1 Starting install... Retrieving file MANIFEST... | 2.1 kB 00:00 ... Retrieving file MANIFEST... | 2.1 kB 00:00 ... Retrieving file linux... | 11 MB 00:00 ... Retrieving file initrd.gz... | 41 MB 00:00 ... ERROR unsupported configuration: Auto allocation of spice TLS port requested but spice TLS is disabled in qemu.conf Domain installation does not appear to have been successful. If it was, you can restart your domain by running: virsh --connect qemu:///system start vmname otherwise, please restart your installation. The error is: > ERROR unsupported configuration: Auto allocation of spice TLS port requested but spice TLS is disabled in qemu.conf and indeed in my /etc/libvirt/qemu.conf I have: spice_tls = 0 (and intentionally so). So how can I create a KVM guest using the SPICE protocol for graphics, **but with TLS disabled**? I doubt it is of relevance, but the reason I want to disable TLS is because I am tunneling the connection to SPICE via SSH already. No need for an extra layer of encryption. ---------- The host system is Ubuntu 14.04.1. Package versions are: * virtinst: 0.600.4-3ubuntu2 * qemu-kvm: 2.0.0+dfsg-2ubuntu1.2 (all up to date as far as apt-get is concerned)