ssh tunneling goodies for sites with kerberos bastion gateways