make sure we only ssh to running instances