add bastion host documentation