Create lockfile to set it proper permissions. Without it the first use (qvm-start netvm) will create it with root:root and 600. Without xend, no one sets dom0 name...