added support for ssh tunneling using ssh's ProxyCommand option