Break out the sshfs role and be more careful about graphical-only apps like chirp and heimdall-frontend