backends: add ssh tunnel backend