Not needed for current use cases, but if "security" emulation is needed, it would be better not to automatically enable VLAN forward because a client sends a frame.
Command line option should be --disable-vlan-learning
JSON spec option should be "disable_vlan_learning":boolean
JSON spec wins.