vswitch.xml: Suggest secure fail-mode to avoid loops with multiple uplinks.