diff --git a/org.jdrupes.vmoperator.runner.qemu/templates/Standard-VM-latest.ftl.yaml b/org.jdrupes.vmoperator.runner.qemu/templates/Standard-VM-latest.ftl.yaml
index 8a5e3fd..e576c8d 100644
--- a/org.jdrupes.vmoperator.runner.qemu/templates/Standard-VM-latest.ftl.yaml
+++ b/org.jdrupes.vmoperator.runner.qemu/templates/Standard-VM-latest.ftl.yaml
@@ -27,6 +27,7 @@
     - "-no-user-config"
     # * https://www.kernel.org/doc/Documentation/virtual/kvm/api.txt
     - [ "-global", "kvm-pit.lost_tick_policy=delay" ]
+    # * Allow spawn for network setup (tap/bridge)
     - [ "-sandbox", "on,obsolete=deny,elevateprivileges=deny,\
         spawn=allow,resourcecontrol=deny" ] 
     - [ "-msg", "timestamp=on" ]