refactor out ssh tunnel setup