Don't expose port 22