watch-logs: use bosh ssh users for tunneling