basic ssh tunnel service

I can integrate this back into the ec2 service once it has been merged.

Docker-DCO-1.1-Signed-off-by: Aaron Feng aaron.feng@gmail.com (github: aaronfeng)