.ssh: add some new sections for machines at $WORK
.ssh: use ssh -W instead of netcat in ProxyCommand's, + use secondary ssh host