VNC through tunneled ssh done right