access/vnc: do not conflate depth with bpp

We should not assume that the depth is the bits per pixel.  The RFB spec
says that bpp must be either 8, 16, or 32 and that depth must be <= to
bpp.