Sigh, has xorg managed to acquire even more brokenness? When there's an active keyboard grab in progress (vbox's keyboard capture), it should override passive grabs by other clients (xmonad) and pass the key events to the active-grabbing client (vbox) normally.