release 0.10

* services_file can be remote, specified as [user@]host:path/to/file

* tunneling improvements:
  * client-managed tunneling, set up without server assistance (-L vs -R)
    * see examples/tunnel
  * services_file carries more info to avoid manual edits when tunneling
  * workaround for tunneling with OpenSSH versions older than 6.0