BS: Allow SSH from the Ansible/bastion server