While stderr isn't connected to the local_program argument (qrun-in-vm) of qrexec-client-vm, it *is* connected (by qrexec-client-vm itself) to the command the user passed to *to qvm-run-vm*.