We would need to extend the master XML-RPC api to fix this.
This isn't really shadowing, but trying to use the same mechanism for something else. What is desired here is a way to share a session without the security issue of having to share a password for the session.
This is in principle possible with x11clone, but you need to give X11 protocol access (ie xhost, share the XAUTHORITY file or similar).